Privacy Policy

Varyn ("we", "our", or "us") operates a web application (the "App") that allows users to manage and schedule appointments between providers and clients efficiently. This Privacy Policy describes how we collect, use, and protect your information when you use our App, including when we connect to your Google Calendar through the Google Calendar API.

• Email address: Used for authentication, communication, and calendar synchronization.
• Phone number (optional): Used to contact clients regarding scheduled appointments.
• Event data: When you connect your Google Calendar, we use the Google Calendar API solely to push and delete events that you create within Varyn. We do not import, read, or store your existing Google Calendar content. From Calendar API responses, we retain only authentication tokens, granted scopes, and Google event IDs for the specific events Varyn creates.

We do not collect or store any other Google Calendar data beyond what is necessary to provide this write-only synchronization functionality.

• Authenticate your account and enable calendar integration
• Display and manage your scheduled events
• Push and delete Varyn-created appointments on your Google Calendar (we do not import or read existing Google Calendar content)
• Communicate important updates or changes to your bookings
• Power AI features that analyze Varyn-native data such as meeting transcripts, in-app messages, and CRM records stored in our database

Varyn's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our only Google user data integration is with the Google Calendar API. We use the Calendar API solely to push and delete events that users create within Varyn. We do not import, read, or store existing Google Calendar content. Calendar API responses we retain are limited to tokens, granted scopes, and Google event IDs for the specific events Varyn creates.

• We only use Google Calendar data to push and delete Varyn-created events on your calendar
• We do not use Google data for advertising or unrelated purposes
• We do not share your Google data with external parties except as required to operate the App
• Our AI features operate exclusively on Varyn-native data (meeting transcripts, in-app messages, and CRM records stored in our database). This AI data is entirely isolated from Google Calendar synchronization. No Google Workspace or Photos user data is transferred to any AI/ML provider.

To provide video meetings, transcription, and AI-assisted insights, we use the following third-party processors:

• Daily.co: Used for video meetings and transcription.
• OpenAI API: Used to analyze meeting transcripts, in-app messages, and CRM records stored within our database.

We do not operate self-hosted or offline models. As noted above, AI features operate exclusively on Varyn-native data and are isolated from Google Calendar synchronization.

All event and user data stored by Varyn are securely maintained on our servers. We implement technical and organizational measures to protect your data from unauthorized access or disclosure, including encryption at rest and in transit, regular security audits, and strict access controls.

You have the right to:

• Access, update, or delete your personal information
• Revoke Varyn's access to your Google Calendar data at any time via your Google Account Permissions page
• Request a copy of your data
• Delete your account and all associated data

We retain your personal data only for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date. We encourage you to review this page regularly to stay informed about how we protect your information.